mister-turtle/cve-2023-32784Extracts KeePass master passwords from memory dumps of unlocked databases, outputting potential characters by position, a passphrase, and a JohnTheRipper mask for CVE-2023-32784.
KeePass 2.X < version 2.54 is susceptible to a vulnerability in which the master password may be retrievable from a memory dump of an unlocked KeePass database. This was assigned CVE-2023-32784
This program aims to retrieve the master password from a memory dump of a running KeePass process. It outputs potential characters by position, a potential passphrase on one line, and a JohnTheRipper mask.
$ go install github.com/mister-turtle/cve-2023-32784@latest
Head to the Releases page and get the latest pre-built binary for your system.
$ git clone github.com/mister-turtle/cve-2023-32784
$ cd cve-2023-32784
$ go buid .
$ go run . --help
Usage of ./cve-2023-32784:
-d string
Path to the memory dump